Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A large enterprise with a complex on-premises Active Directory environment needs to synchronize user accounts, groups, and password hashes to Microsoft Entra ID. They also require support for advanced filtering rules and the ability to write back certain attributes from Microsoft Entra ID to on-premises AD. Which Microsoft Entra capability is essential for fulfilling these specific synchronization requirements?
- AMicrosoft Entra Connect
- BMicrosoft Entra Application Proxy
- CMicrosoft Entra Domain Services
- DMicrosoft Entra Connect Health
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Connect
Microsoft Entra Connect is the tool designed to synchronize on-premises identities with Microsoft Entra ID. It supports various synchronization scenarios including password hash synchronization, advanced filtering, and attribute writeback, making it crucial for hybrid identity environments.
Why the other options are wrong
- B. Application Proxy publishes on-premises web apps, not for directory synchronization.
- C. Domain Services provides managed AD in Azure, not for synchronizing with on-premises AD.
- D. Connect Health monitors the health of Entra Connect, but doesn't perform the synchronization itself.
Microsoft Entra Connect
A Microsoft tool designed to meet and accomplish your hybrid identity goals. It provides features to synchronize users, groups, and devices between your on-premises Active Directory and Microsoft Entra ID.
- Supports Password Hash Synchronization (PHS), Pass-through Authentication (PTA), and Federation (AD FS).
- Enables advanced filtering (attribute-based, OU-based).
- Offers writeback capabilities for devices, groups, and password changes.
- Is typically installed on an on-premises server.
Memory trick: Entra Connect: your bridge from old AD to the new cloud stage.